CVE-2022-33944 is an authenticated Insecure Direct Object References (IDOR) vulnerability affecting the MiCODUS MV720 GPS tracker web server. This flaw allows an authenticated attacker to access arbitrary device IDs by manipulating the "Device ID" POST parameter. With a CVSS score of 6.5 (Medium), this vulnerability is remotely exploitable with low attack complexity, potentially leading to high confidentiality impact, though integrity and availability are not affected. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating a high level of awareness and concern.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:micodus:mv720_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.